Lead ForgeRock Platform Engineer

Zodiac Solutions, Inc; San Antonio (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

Zodiac Solutions, Inc is seeking ForgeRock Platform Engineers in Texas to administer platform services, manage deployments, automate tasks, monitor systems, and provide operational IAM support. The role emphasizes DevOps proficiency with ForgeRock IAM, including integration with SAML 2.0, OAuth 2.0, LDAP, and REST APIs, plus building custom modules and ensuring SSO/MFA security.

Experience with ForgeRock AM/IDM/DS and Prometheus for monitoring is preferred; Java is a nice-to-have, enabling

Qualifications

• Hands-on IAM with ForgeRock suite (AM/IDM/DS/Identity Gateway).
• Strong DevOps and platform administration skills required.
• Java experience is desirable but not mandatory.

Responsibilities

• Design, develop, and implement IAM solutions using the ForgeRock suite.
• Configure and customize ForgeRock AM, IDM, DS, and Identity Gateway components.
• Develop custom authentication modules, journeys, and authorization policies.
• Integrate ForgeRock with enterprise apps using SAML 2.0, OAuth 2.0, OIDC, LDAP, and REST APIs.
• Develop and maintain Java-based ForgeRock customizations and extensions.
• Implement SSO, MFA, and federation solutions.
• Design and implement user lifecycle management and provisioning workflows.
• Troubleshoot production IAM/authentication issues; collaborate with security and infra teams.
• Perform platform upgrades, deployments, performance tuning, and security hardening.

Skills

ForgeRock IAM

Identity & Access Management

Python

Go

Java Spring Boot

DevOps

Prometheus

Tools

ForgeRock AM/ IDM/DS

Prometheus

Job description

Comment:- This requirement is specifically for ForgeRock Platform Engineers, not a ForgeRock developer. The selected candidate will be responsible for platform administration, server maintenance, deployments, automation, monitoring, and operational support. Therefore, DevOps skills are a core requirement and cannot be compromised. Experience with Java is desirable but should be treated as a nice-to-have skill rather than a mandatory one.

Mandatory Skills:

• Identity & Access Management: ForgeRock, PingIdentity, OAuth 2.0
• Programming & Frameworks: Python, Go (Golang), Java Spring Boot (facade architecture)
• Monitoring: Prometheus server build and setup

Job Description

• Design, develop, and implement IAM solutions using the ForgeRock suite.
• Configure and customize ForgeRock AM, IDM, DS, and Identity Gateway components.
• Develop custom authentication modules, journeys, and authorization policies.
• Integrate ForgeRock with enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and REST APIs.
• Develop and maintain Java-based customizations and extensions for ForgeRock products.
• Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions.
• Design and implement user lifecycle management and provisioning workflows.
• Troubleshoot and resolve production issues related to authentication, authorization, and identity management.
• Collaborate with application teams, security architects, and infrastructure teams for IAM integrations.
• Perform platform upgrades, deployments, performance tuning, and security hardening.
• Create technical documentation, design documents, and operational procedures.
• Follow security best practices and compliance standards.